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The challenge for user authentication in a global file system is allowing people to 
grant access to specific users and groups in remote administrative domains, without 
assuming any kind of pre-existing administrative relationship. The traditional 
approach ... 
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Wireless mesh networks (WMNs) are gaining growing interest as a promising 
technology for ubiquitous high-speed network access. While much effort has been 
made to address issues at physical, data link, and network layers, little attention has 
been paid ... 
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The protection of customer privacy is a fundamental issue in today's corporate 
marketing strategies. Not surprisingly, many research efforts have proposed new 
privacy-aware technologies. Among them, Hippocratic databases offer mechanisms 
for enforcing ... 
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This paper addresses the cost imposed on the e-Commerce market when retailer and 
customer possess an information advantage over credit companies; in short, we 
examine the transaction cost on the default and the fraud. When retailers and 
customers differ ... 
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How does a machine know who is using it? Current systems authenticate their users 
infrequently, and assume the user's identity does not change. Such persistent 
authentication is inappropriate for mobile and ubiquitous systems, where 
associations ... 
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The focus of access control in client/server environments is on protecting sensitive 
server resources by determining whether or not a client is authorized to access those 
resources. The set of resources is usually static, and an access control policy ... 
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In this paper, we introduce the family of UCON ABC models for usage control (UCON), 

which integrate Authorizations (A), oBligations (B), and Conditions (C). We call these 
core models because they address the essence of UCON, leaving ... 
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Computer users are asked to generate, keep secret, and recall an increasing number 
of passwords for uses including host accounts, email servers, e-commerce sites, and 
online financial services. Unfortunately, the password entropy that users can 
comfortably ... 
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The focus of access control in client/server environments is on protecting sensitive 
server resources by determining whether or not a client is authorized to access those 
resources. The set of resources are usually static, and an access control policy ... 
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Federated identity management is sometimes criticized as exacerbating the problem 
of online identity theft, based as it is on the idea of connecting together previously 
separate islands of identity information. This paper explores this conjecture, and ... 
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Current systems for banking authentication require that customers not reveal their 
access codes, even to members of the family. A study of banking and security in 
Australia shows that the practice of sharing passwords does not conform to this 
requirement. ... 
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This paper examines legal and policy issues raised by changes in payment methods 
related to the rise of the Internet. The two major changes -- the rise of P2P systems 
like PayPal, and the rise of Internet billing systems to replace the use of paper bills ... 
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First order authentication of the privacy and security of Internet banking rests mainly 
on distinctive user names and passwords. Our qualitative study of banking, security 
and privacy shows it is common for married and de facto couples in Australia to ... 
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With the recent adoption of marketing activities outsourcing, there have been 
increasing demands and concerns for privacy control. The traditional approach of a 
bulk transmission of the customers' information to a marketing company cannot 
meet such demands, ... 
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Electronic commerce is inevitable and will reshape our lives, but before true 
electronic commerce environments can be realized, it will be necessary to secure 
your enterprise against outside attacks on its electronic information and provide 
controls ... 
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The information age has brought with it the promise of unprecedented economic 
growth based on the efficiencies made possible by new technology. This same 
greater efficiency has left society with less and less time to adapt to technological 
progress. ... 
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The Secure Electronic Transaction (SET) protocol has been proposed by a consortium 
of credit card companies and software corporations to secure e-commerce 
transactions. When the customer makes a purchase, the SET dual signature 
guarantees authenticity ... 
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New technologies have introduced new ways in business transactions where online 
contracting is complementing and even substituting traditional paper-based 
transactions. One of the major recent innovations of online contracting is the use of 
intelligent ... 
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Current service architecture description language and composition approaches 
consider simplistic method invocation. They pay less attention to the formal 
semantics and verification of service composition in the design, and less support 
property specifications ... 
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